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REMARKS 

The January 25, 2008 Office Action was based upon pending Claims 1, 5, 7, 8, 12-14, 17, 
and 20-24. Claims 1,5, and 8 are amended by this paper. Thus, after entry of this amendment, 
Claims 1, 5, 7, 8, 12-14, 17, and 20-24 are pending and presented for fiirther consideration. The 
Applicant notes that certain of the Claims are amended by this paper to clearly point out and 
distinctly claim what the Applicant regards as the invention. Claim 1 for example is amended to 
recite "A method of transferring data over a computer network from a network server to a client 
computer system, the method comprising: 

receiving a request by a requestor using a client computer system for data from at 

least one network server storing data, at least some of the data stored by the network 

server being encrypted; 

checking an attribute of the requested data to determine whether the requested 

data is encrypted with an encryption key; 

if the requested data is encrypted with the encryption key, sending the encrypted 

data to the client computer system without data indicative of an associated decryption 

key; 

sending a message to the requestor indicating that the requested data is not 
encrypted with their key when the encryption key used to encrypt the requested data is not 
associated with the requestor; 

if the requested data is unencrypted, automatically retrieving the encryption key 
associated with the requestor fi:om the client computer system and; 

encrypting the requested data with the encryption key associated with the 
requestor automatically and without user intervention to create encrypted data; and 

sending the encrypted data to the client computer system without data indicativ e 
ef-the associated decryption key." 

In the Office Action, the Examiner objects to the Applicant's response of November 7, 
2007 under 35 U.S.C. § 132(a) and rejects Claims 1, 5, and 8 under 35 U.S.C. § 112, first 
paragraph for entering new matter and failing to provide written description for the limitation of 
"without data indicative of an associated decryption key". The AppUcant notes that the limitation 
of "data indicative of is removed by this paper. The Applicant fiirther notes that the aspects of 
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"sending the encrypted data to the cHent computer system without an associated decryption key" 
are described in the subject application as filed, for example at page 15, line 19 through page 16, 
line 7. The Applicant believes that the amendments of this paper overcome the Examiner's 
objections and rejections under 35 U.S.C. § 132(a) and 35 U.S.C. § 112, first paragraph and 
requests that the objections and rejections be withdrawn. 

In the Office Action, the Examiner rejects Claims 1, 5, 8, 12, 13, 17, 20-22 and 24 under 
35 U.S.C. § 103(a) as being unpatentable over Hanna et al. (U.S. Patent No. 7,178,021) in view 
of Pond et al. (U.S. Patent No. 4,864,616) in view of Simmons et al. (U.S. Publication 
No. 2001/0039659) and fiirther in view of Fan et al. (U.S. Patent No. 6,310,692). The Applicant 
has carefully reviewed the newly cited references and notes that Hanna et al. '021 describes 
methods and apparatus for utilizing a non-secure file server for storage and transmission of data 
in a secure manner among individual clients or groups of clients authorized access to the data. 
Hanna et al. further describes, for example, "the encrypted data and the encrypted first 
decryption key are forwarded fi-om the first client to the file server for storage." The encrypted 
data is stored on the file server and the encrypted first decryption key is stored on the file server 
and an access control list associated with the encrypted data." Col. 1, 11. 58-62. "In response to a 
request to access the encrypted data, the file server returns the encrypted data and at least the 
applicable encrypted first encryption key needed to decrypt the data" (Col. 2, 11. 4-6). Hanna 
et al. fiirther describes "the encrypted data and the encrypted first decryption key Kid along 
with a client or group identifier are forwarded over the network 10 by the client 12 Cg for receipt 
by the file server 14." (Col. 4, 1. 67 — Col. 5, 1. 3). 

The Applicant thus notes that Haima et al. describes a system supporting access to 
encrypted data to a plurality of clients who are a member of a defined group and, to facilitate this 
access, transmits encrypted data along with an encrypted decryption key. In contrast, the 
Applicant's claim includes sending encrypted data without an associated decryption key. The 
Applicant further notes that Hanna et al. strongly teaches away from the Applicant's claimed 
invention by providing a system where multiple authorized users can have access to the same 
encrypted data by including decryption key information with encrypted data to which they have 
access. 
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The Applicant has carefully reviewed the Pond et al. reference and notes that Pond et al. 
describe a method for cryptographically labeling electronically stored data as part of a security 
system for personal computers. Pond et al. describes encrypting data using two or more key 
streams and attaching a banner that is not encrypted but which announces that the associated file 
is protected. Pond et al. further describes that an Initialization Vector (IV) field of a label is 
filled with random bits. The random IV bits are used by the data ciphering processor to indicate 
a starting point for each key stream. In addition, the IV field may contain bits that indicate which 
of several reversible functions is to be used for encryption an decryption of the file and the 
direction in which the key streams are to be applied. Pond et al. further discloses that "much of 
the data necessary to decrypt an encrypted file is attached permanently to the file but is itself 
encrypted" (Col. 4, 11. 17-19). Pond et al. fUrther describes "four bit flags of the Key Mix 36 are 
used to designate which of the optional key streams 16, 22, 24, 26 are to be used to encrypt or 
decrypt the file. At least one of the key stream flags of the key mix 36 must be set or else the 
file will not be encrypted and the label 30 will not exist." (Col. 6, 11. 28-34). 

The Applicant thus notes that Pond et al. discloses sending encrypted data along with data 
indicating associated encryption/decryption parameters. Pond et al. emphasizes that the 
designated one or more key stream flags must be set or the file will not be encrypted. Thus, 
Pond et al. also strongly teaches away from the Applicant's claimed invention, for example, as 
recited in Claim 1. 

The Applicant notes that Simmons et al. '659 describes a transaction system for 
transporting media files from content provider sources to palm entertainment devices. The 
Applicant notes, however, that Simmons et al. fails to teach or suggest sending a message to a 
requester indicating that requested data is not encrypted with their key when the encryption key 
used to encrypt the requested data is not associated with the requester. Simmons et al. also fails 
to teach or suggest that if requested data is unencrypted, automatically retrieving an encryption 
key associated with the requester fi:om the client computer system. 

The Applicant notes that Fan et al. '692 describes a dynamic centralized printer resource 
management system to monitor printer resources and deliver warning messages to systems 
administrators, and users, and/or vendors when a printer resource falls below a predetermined 
threshold. The Applicant agrees that Fan et al. does describe that, for example, thresholds for 
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any monitored printer resource set by a second new printer attribute 264 can be changed by a 
system administrator as indicated by the Examiner at Column 4, lines 35-36, as indicated by the 
Examiner. However, Fan et al. fails to describe or suggest encryption or decryption protocols. 

The Applicant thus respectfully notes that the combination of Hanna et al.. Pond et al., 
Simmons et al., and Fan et al. fail to teach or suggest each and every element of the Applicant's 
claimed invention and the Applicant thus respectfully requests that the rejection of Claim 1 under 
35 U.S.C. § 103(a) in light of these references be withdrawn. While Claims 5 and 8 recite 
different specific limitations, they are likewise believed patentable over the Hanna et al., the 
Pond et al., the Simmons et al., and the Fan et al. references as well as the other art of record for 
similar reasons to those previously indicated with respect to Claim 1. The Applicant thus 
believes that the remaining base claims 5 and 8 are also patentable and respectfully request that 
the rejection under 35 U.S.C. § 103(a) be withdravm. The Applicant further believes that the 
remaining base claims depending directly or indirectly from the corresponding base Claim 1,5, 
or 8 properly further define the Applicant's claimed invention and are also patentable due at least 
in part to their dependence on the respective base claim. 

The Examiner further rejects Claims 7, 14, and 23 under 35 U.S.C. § 103(a) as 
unpatentable over the combination Hanna et al, Pond et al., Simmons et al., and Eldridge et al. 
The Applicant notes that Eldridge et al. '721 describes methods and apparatus for updating 
password status for one or more servers in a client/server environment. Eldridge et al. further 
describes a key that may refer to any data or authentication information which is currently used 
by process to partake in an authentication protocol. For example, keys 308 may comprise a 
password itself, a one-way hash of a password, a public key corresponding to a private key 
derived from data including the password and others, however, Eldridge et al. fails to disclose or 
suggest the other limitations of the base claims and thus believes that Claims 7 and 14 are 
patentable under the requirements of 35 U.S.C. § 103(a) in light of Haima et al.. Pond et al., 
Simmons et al.. Fan et al, and Eldridge et al., due at least in part to their dependence on the 
respective base claim. 
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Co-Pendins Applications of Assisnee 



Applicant wishes to draw the Examiner's attention to the following co-pending 
applications and issued patents of the present application's assignee. 



Serial 
Number 


Atty. Docket No. 


Title 


Filed 


1 1 //I <1^0/1 


MTIPAT.187C1 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


UO/14/ZUUO 




MTIPAT.187DV1 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


\)yl It/ZUUO 


09/277482 


MTIPAT.075A 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


03/26/1999 


10/962997 


MTIPAT.075C1 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


10/12/2004 


11/524097 


MTIPAT.075C2 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


09/20/2006 


09/277335 


MTIPAT.076A 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


03/26/1999 


11/503101 


MTIPAT.076C1 


DATA SECURITY FOR DIGITAL DATA 
STORAGE 


08/11/2006 



Copies of the patents, applications, and pending claims, including any office actions. 
Applicant's responses, and notices of allowance, are available through PAIR. However, if the 
Examiner so requests. Applicant will be happy to provide the Examiner with copies of any 
patents, applications, pending claims, office actions, allowances, or any other documents, at any 
time. 

No Disclaimers or Disavowals 

Although the present communication includes alterations to the claims, and 
characterizations of claim scope and referenced art, the Applicants are not conceding in this 
application that previously pending claims are not patentable over the cited references. Rather, 
any alterations or characterizations are being made to facilitate expeditious prosecution of this 
application. The Applicants reserve the right to pursue at a later date any previously pending or 
other broader or narrower claims that capture any subject matter supported by the present 
disclosure, including subject matter found to be specifically disclaimed herein or by any prior 
prosecution. Accordingly, reviewers of this or any parent, child or related prosecution history 
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shall not reasonably infer that the Applicants have made any disclaimers or disavowals of 
subject matter supported by the present application. 
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SUMMARY 



In view of the foregoing, the present appUcation is beUeved to be in condition for 
allowance, and such allowance is respectfully requested. If further issues remain to be resolved, 
the Examiner is cordially invited to contact the undersigned such that any remaining issues may 
be promptly resolved. 

Also, please charge any additional fees, including any fees for additional extension of 
time, or credit overpayment to Deposit Account No. 11-1410. 



Respectfully submitted, 



KNOBBE, MARTENS, OLSON & BEAR, LLP 



Dated: March 25, 2008 




J^es W. f^^Pf^ 
/Registration No. 49,076 
Agent of Record 
Customer No. 20,995 
(949) 760-0404 
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